Software

Wikimedia: Rogue OpenAI agents behind unauthorized Wikipedia edits

The Wikimedia Foundation says rogue OpenAI agents made unauthorized Wikipedia edits and may have been partially responsible for a May outage. As Wikimedia Chief Product and Technology Officer Selena Deckelmann revealed Monday, Wikipedia hosts over 67 million articles in more than 300 languages and gets up to 15 billion page views per month. However, last

Wikimedia: Rogue OpenAI agents behind unauthorized Wikipedia edits Read More »

South Korea probes bank breaches amid suspected AI-powered attacks

South Korea’s Financial Services Commission (FSC) held an emergency meeting following a series of cyberattacks targeting financial institutions in the country. During the meeting, officials confirmed a data breach at Shinhan Bank and said other cybersecurity incidents affected other South Korean banks, including Kookmin Bank. Shinhan Bank and KB Kookmin Bank are large private South

South Korea probes bank breaches amid suspected AI-powered attacks Read More »

New Dell System Update flaw lets hackers gain root privileges

Dell warned customers to patch a critical vulnerability in the System Update (DSU) command-line interface (CLI) deployment tool as soon as possible. DSU lets enterprise IT administrators deploy BIOS, firmware, and software updates onto Linux and Windows systems on PowerEdge enterprise server infrastructure. In a Thursday security advisory, the company said the flaw (tracked as

New Dell System Update flaw lets hackers gain root privileges Read More »

Denmark population registry data breach affects 8.8 million people

Denmark’s Central Population Register (CPR) is warning of a data breach that exposed the personal information of approximately 8.8 million registered individuals. This includes people who live in the country, individuals who have moved abroad, and also deceased people. The CPR is the country’s national civil registry, containing personal information on residents, including names, addresses,

Denmark population registry data breach affects 8.8 million people Read More »

IQVIA fined $7.8 million for failing to properly anonymize health data

Italy’s Data Protection Authority (GPDP) has fined IQVIA €7 million ($7.8M) over poor data-processing practices that the agency says could have put roughly one million patients at risk of data exposure and de-anonymization. IQVIA is a multinational company that provides healthcare data analysis, technology, and clinical research services. The company claims on its website that

IQVIA fined $7.8 million for failing to properly anonymize health data Read More »

Rejetto HFS servers now actively scanned for critical RCE flaw

Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution (RCE). VulnCheck VP of Security Research Caitlin Condon posted on LinkedIn over the weekend that the company’s Canary Intelligence honeypots had observed probes targeting CVE-2026-61500. Condon said the observed activity

Rejetto HFS servers now actively scanned for critical RCE flaw Read More »

Engineer sentenced for locking over 3,000 devices on employer network

A former core infrastructure engineer at an industrial company headquartered in New Jersey was sentenced to 32 months in prison for locking thousands of devices on his employer’s network in a ransomware-style attack. 57-year-old Daniel Rhyne from Kansas City, Missouri, pleaded guilty to his role in a failed extortion plot targeting the New Jersey company

Engineer sentenced for locking over 3,000 devices on employer network Read More »

Nikkei discloses breaches of employees’ Microsoft, Google email accounts

Over the weekend, Japanese publishing giant Nikkei disclosed that unknown attackers recently breached two employee email accounts and used one to send thousands of phishing emails. In a Sunday statement, the company said an employee’s Google Workspace account was accessed in late July, exposing the personal information of employees and business partners. Nikkei changed the

Nikkei discloses breaches of employees’ Microsoft, Google email accounts Read More »

LinkedIn adds new tools to fight fake profiles and bogus work histories

AI has made it significantly easier for people to create fake accounts and identities to engage in online manipulation and scams. On Wednesday, LinkedIn announced a new set of tools to combat the problem while helping people and companies better control their presence on the platform. The company says it will now let members vouch

LinkedIn adds new tools to fight fake profiles and bogus work histories Read More »

Arista patches actively exploited VeloCloud Orchestrator zero-day

Arista Networks has released security patches for a zero-day flaw that is being actively exploited and affects VeloCloud Orchestrator (VCO) On-Prem deployments. VCO is a cloud-based centralized management platform that helps admins configure, monitor, and manage VeloCloud SD-WANs (Software-Defined Wide Area Networks) and associated edge devices. Tracked as CVE-2026-93952, this maximum-severity flaw stems from an

Arista patches actively exploited VeloCloud Orchestrator zero-day Read More »